At a quick glance it seems rather easy for tiktok to slip in whatever it wants in that source from time to time. Is this the status quo for third party cookies?